CHALLENGE INFORMATION
Platform: TryHackMe
Days: 09-16
Room: Advent of Cyber 2024
Description: Dive into the wonderful world of cybersecurity by engaging in festive, beginner-friendly exercises every day in the lead-up to Christmas!
Day-09
Nine o’clock, make GRC fun, tell no one.
Learning Objectives
- Understand the fundamentals of governance, risk, and compliance (GRC).
- Learn how to perform a basic risk assessment.
Questions and Answers
Question 1: What does GRC stand for?
Governance, Risk, and Compliance
Question 2: What is the flag you receive after performing the risk assessment?
<redacted-flag>
Question 3: If you enjoyed this task, feel free to check out the Risk Management room.
No answer needed
Day-10
He had a brain full of macros, and had shells in his soul.
Learning Objectives
- Understand how phishing attacks work.
- Discover how macros in documents can be used and abused.
- Learn how to carry out a phishing attack with a macro.
Questions and Answers
Question 1: What is the flag value inside the flag.txt file that’s located on the Administrator’s desktop?
<redacted-flag>
Question 2: If you enjoyed this task, feel free to check out the Phishing module.
No answer needed
Day-11
If you’d like to WPA, press the star key!
Learning Objectives
- Understand what Wi-Fi is.
- Explore its importance for an organization.
- Learn the different Wi-Fi attacks.
- Learn about the WPA/WPA2 cracking attack.
Questions and Answers
Question 1: What is the BSSID of our wireless interface?
02:00:00:00:02:00
Question 2: What is the SSID and BSSID of the access point?
Format: SSID, BSSID
MalwareM_AP, 02:00:00:00:00:00
Question 3: What is the BSSID of the wireless interface that is already connected to the access point?
02:00:00:00:01:00
Question 4: What is the PSK after performing the WPA cracking attack?
<redacted-psk>
Question 5: If you enjoyed this task, feel free to check out the Networking module.
No answer needed
Day-12
If I can’t steal their money, I’ll steal their joy!
Learning Objectives
- Understand the concept of race condition vulnerabilities.
- Identify the gaps introduced by HTTP/2.
- Exploit race conditions in a controlled environment.
- Learn how to fix the race.
Questions and Answers
Question 1: What is the flag value after transferring over $2000 from Glitch’s account?
<redacted-flag>
Question 2: If you enjoyed this task, feel free to check out the Race Conditions room!
No answer needed
Question 3: Where balances shift and numbers soar, look for an entry - an open door!
No answer needed
Day-13
It came without buffering! It came without lag!
Learning Objectives
- Learn about WebSockets and their vulnerabilities.
- Learn how WebSocket message manipulation can be done.
Questions and Answers
Question 1: What is the value of Flag1?
<redacted-flag>
Question 2: What is the value of Flag2?
<redacted-flag>
Question 3: If you enjoyed this task, feel free to check out the Burp Suite module.
No answer needed
Day-14
Even if we’re horribly mismanaged, there’ll be no sad faces on SOC-mas!
Learning Objectives
- Understand self-signed certificates.
- Learn about man-in-the-middle (MitM) attacks.
- Use Burp Suite proxy to intercept traffic.
Questions and Answers
Question 1: What is the name of the certificate authority (CA) that has signed the Gift Scheduler certificate?
THM
Question 2: Look inside the POST requests in the HTTP history. What is the password for the snowballelf account?
c4rrotn0s3
Question 3: Use the credentials for any of the elves to authenticate to the Gift Scheduler website. What is the flag shown on the elves’ scheduling page?
<redacted-flag>
Question 4: What is the password for Marta May Ware’s account?
H0llyJ0llySOCMAS!
Question 5: Mayor Malware finally succeeded in his evil intent: with Marta May Ware’s username and password, he can finally access the administrative console for the Gift Scheduler. G-Day is cancelled! What is the flag shown on the admin page?
<redacted-flag>
Question 6: If you enjoyed this task, feel free to check out the Burp Suite module.
No answer needed
Day-15
Be it ever so heinous, there’s no place like Domain Controller.
Learning Objectives
- Learn about the structures of Active Directory (AD).
- Learn about common AD attacks.
- Investigate a breach against an AD environment.
Questions and Answers
Question 1: Use the Security tab within Event Viewer to answer questions 1 and 2.
No answer needed
Question 2: On what day was Glitch_Malware last logged in?
Answer format: DD/MM/YYYY
07/11/2024
Question 3: What event ID shows the login of the Glitch_Malware user?
4624
Question 4: Read the PowerShell history of the Administrator account. What was the command that was used to enumerate AD users?
Get-ADUser -Filter * -Properties MemberOf | Select-Object Name
Question 5: Look in the PowerShell log file located in Application and Services Logs > Windows PowerShell. What was Glitch_Malware’s set password?
<redacted-password>
Question 6: Review the Group Policy Objects (GPOs) present on the machine. What is the name of the installed GPO?
Malicious GPO - Glitch_Malware Persistence
Question 7: If you enjoyed this task, feel free to check out the Active Directory Hardening room.
No answer needed
Day-16
The Wareville’s Key Vault grew three sizes that day.
Learning Objectives
- Learn about Azure, what it is, and why it is used.
- Learn about Azure services like Azure Key Vault and Microsoft Entra ID.
- Learn how to interact with an Azure tenant using Azure Cloud Shell.
Questions and Answers
Question 1: What is the password for backupware that was leaked?
<redacted-password>
Question 2: What is the group ID of the Secret Recovery Group?
7d96660a-02e1-4112-9515-1762d0cb66b7
Question 3: What is the name of the vault secret?
aoc2024
Question 4: What are the contents of the secret stored in the vault?
WhereIsMyMind1999
Question 5: Liked today’s task? Check the Exploiting Active Directory room to practice user and group enumeration in a similar yet different environment!
No answer needed